ropshell> use e074499a3b0996ab67e030a7ea57598c (download) name : ftp (arm/ELF) base address : 0x10d7c total gadgets: 65
ropshell> suggest jmpcall > 0x00010deb : bx r3 > 0x00010ded : bx lr > 0x00010e59 : blx r3 load mem > 0x00010dba : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr > 0x000121fb : ldrh fp, [lr, #0]!; adds r7, #8; mov sp, r7; pop {r7, pc} > 0x0001117f : ldr r3, [r7, #0x1c]; mov r0, r3; adds r7, #0x20; mov sp, r7; pop {r7, pc} > 0x00010db2 : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr > 0x00010dae : ldr r3, [pc, #0x14]; ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr pop pop ret > 0x00010e37 : pop {r4, pc} > 0x00011307 : pop {r4, r7, pc} > 0x000112a5 : pop {r4, r5, r7, pc} > 0x000118db : pop {r4, r5, r6, r7, pc} stack pivoting > 0x000118d9 : mov sp, r7; pop {r4, r5, r6, r7, pc} write mem > 0x000112ff : str r2, [r3, #4]; nop ; adds r7, #0xc; mov sp, r7; pop {r4, r7, pc}